stan/jdk-24
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

8195793: Remove GTE CyberTrust Global Root

Browse Source 
Reviewed-by: rhalade
This commit is contained in:
Sean Mullan 2018-10-19 09:31:57 -04:00
parent 4abb6861ec
commit a675a48940
2 changed files with 4 additions and 9 deletions
src/java.base/share/lib/security
cacerts
test/jdk/sun/security/lib/cacerts
VerifyCACerts.java

BIN
src/java.base/share/lib/security/cacerts

Binary file not shown.

13
test/jdk/sun/security/lib/cacerts/VerifyCACerts.java

@ -24,8 +24,8 @@
/**
* @test
* @bug 8189131 8198240 8191844 8189949 8191031 8196141 8204923 8195774 8199779 8209452
* 8209506 8210432
* @bug 8189131 8198240 8191844 8189949 8191031 8196141 8204923 8195774 8199779
* 8209452 8209506 8210432 8195793
* @summary Check root CA entries in cacerts file
*/
import java.io.File;
@ -42,7 +42,7 @@ public class VerifyCACerts {
+ File.separator + "security" + File.separator + "cacerts";
// The numbers of certs now.
private static final int COUNT = 93;
private static final int COUNT = 92;
// map of cert alias to SHA-256 fingerprint
private static final Map<String, String> FINGERPRINT_MAP
@ -116,8 +116,6 @@ public class VerifyCACerts {
"B4:78:B8:12:25:0D:F8:78:63:5C:2A:A7:EC:7D:15:5E:AA:62:5E:E8:29:16:E2:CD:29:43:61:88:6C:D1:FB:D4");
put("geotrustuniversalca [jdk]",
"A0:45:9B:9F:63:B2:25:59:F5:FA:5D:4C:6D:B3:F9:F7:2F:F1:93:42:03:35:78:F0:73:BF:1D:1B:46:CB:B9:12");
put("gtecybertrustglobalca [jdk]",
"A5:31:25:18:8D:21:10:AA:96:4B:02:C7:B7:C6:DA:32:03:17:08:94:E5:FB:71:FF:FB:66:67:D5:E6:81:0A:36");
put("thawteprimaryrootca [jdk]",
"8D:72:2F:81:A9:C1:13:C0:79:1D:F1:36:A2:96:6D:B2:6C:95:0A:97:1D:B4:6B:41:99:F4:EA:54:B7:8B:FB:9F");
put("thawteprimaryrootcag2 [jdk]",
@ -239,10 +237,7 @@ public class VerifyCACerts {
// Exception list to 90 days expiry policy
// No error will be reported if certificate in this list expires
private static final HashSet<String> EXPIRY_EXC_ENTRIES
= new HashSet<String>(Arrays.asList(
"gtecybertrustglobalca [jdk]"
));
private static final HashSet<String> EXPIRY_EXC_ENTRIES = new HashSet<>();
// Ninety days in milliseconds
private static final long NINETY_DAYS = 7776000000L;